Associate DevSecOps Engineer, Platform and Tooling

Join our Information Security team as an Associate DevSecOps Engineer and be part of the core team building a global enterprise-grade Application Security program from the ground up. You will play a vital role in implementing security testing tools, integrating them into our CI/CD ecosystems, and delivering actionable findings to developers—enabling secure software delivery at scale. Together, we will make a remarkable impact on people's lives by protecting the systems that discover and deliver life-changing medicines to patients who need them. 

Responsibilities:

• Supporting or administering Application Security Testing (AST) tools (SAST, DAST, IAST, SCA, etc.) to identify vulnerabilities and configuration issues during the software development lifecycle. 
• Supporting or administering tools such as Application Security Posture Management (ASPM) to centralize and deduplicate findings from multiple solutions and integrate reporting into software development workflows. 
• Integrating security tooling with CI/CD pipelines. 
• Writing custom scripts and code to automate workflows and integrate technologies.